Cisco NX-OS System Software CVE-2017-12332 Arbitrary File Write Vulnerability

Bugtraq ID:	102160
Class:	Design Error
CVE:	CVE-2017-12332
Remote:	No
Local:	Yes
Published:	Nov 29 2017 12:00AM
Updated:	Dec 19 2017 10:38PM
Credit:	Cisco
Vulnerable:	Cisco Unified Computing System Manager 0 Cisco Unified Computing System 7.0(0)HSK(0.357) Cisco Nexus 7700 Series Switches 0 Cisco Nexus 7000 Series Switches 8.1(1) Cisco Nexus 7000 Series Switches 8.1(0)BD(0.20) Cisco Nexus 7000 Series Switches 0 Cisco Nexus 6000 Series Switches 0 Cisco Nexus 5600 Platform Switches 0 Cisco Nexus 5500 Platform Switches 0 Cisco Nexus 5000 Series Switches 0 Cisco Nexus 2000 Series Fabric Extenders 0 Cisco Multilayer Director Switches 0
Not Vulnerable:

Cisco NX-OS System Software CVE-2017-12332 Arbitrary File Write Vulnerability

Cisco NX-OS System Software is prone to an arbitrary file-write vulnerability.

Successful exploits may allow an attacker to write arbitrary files as root on the system. This may aid in further attacks.

This issue is being tracked by Cisco bug IDs CSCvf16513, CSCvf23794 and CSCvf23832.

Cisco NX-OS System Software CVE-2017-12332 Arbitrary File Write Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco NX-OS System Software CVE-2017-12332 Arbitrary File Write Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco NX-OS Homepage (Cisco)
  
• Cisco NX-OS System Software Patch Installation Arbitrary File Write Vulnerabilit (Cisco)